Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/AEB081C8EB7D11F08F2DA3C6506F56BC.roa
File:                     AEB081C8EB7D11F08F2DA3C6506F56BC.roa (raw, json)
Hash identifier:          TKMj0SGDDWUO45H6UFrKS0aoJO0l9h24Ptk33swY28A=
Subject key identifier:   CD:AB:1E:0F:9D:8D:DD:22:71:AF:66:7B:70:46:93:84:21:37:89:DB
Certificate issuer:       /CN=A91EEBD4/serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Certificate serial:       1F
Authority key identifier: 8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/AEB081C8EB7D11F08F2DA3C6506F56BC.roa
Signing time:             Sun 01 Mar 2026 05:46:05 +0000
ROA not before:           Wed 07 Jan 2026 04:02:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138216
IP address blocks:        103.122.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
                          rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEBD4, serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
        Validity
            Not Before: Jan  7 04:02:29 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3d29d-4105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:00:fb:35:45:d5:64:75:52:e0:1d:2b:42:
                    1f:9d:79:26:b5:72:1d:59:40:63:9e:d9:16:b4:67:
                    19:e3:88:fb:58:7d:5a:b5:11:ec:ec:1e:b8:38:e3:
                    a0:4d:a0:0a:d7:4c:34:78:72:06:04:1b:bb:45:50:
                    d6:2c:4c:6a:94:13:9a:c4:08:8e:88:64:28:57:7e:
                    61:b0:33:99:81:dc:f1:8b:7f:1f:42:f8:e3:97:df:
                    70:0a:f5:e9:bb:fd:44:33:fa:b8:ce:05:c7:5b:87:
                    a2:42:50:a4:ad:90:07:cd:eb:3d:8f:97:e1:1b:2a:
                    07:16:6e:df:4d:fc:01:57:3a:6d:1c:2d:4f:64:64:
                    70:75:3d:1b:4b:5a:97:f2:f7:b7:ca:1a:ec:d6:03:
                    ad:e5:f8:c3:73:3c:b8:da:c2:f7:17:63:f2:96:8a:
                    24:7d:57:f6:08:40:db:f0:32:c9:6e:4c:eb:5a:99:
                    e6:a8:81:d6:7a:7f:c2:95:7c:8c:d4:92:a9:4b:38:
                    7d:1d:13:f4:f7:fc:75:f4:e1:a6:88:b5:a4:e6:2e:
                    9e:18:ac:f9:5e:2f:07:3c:ac:51:20:64:b7:16:f5:
                    a2:58:8d:5c:a0:9b:2b:02:da:8f:27:1f:8c:12:b7:
                    4a:54:c8:69:51:df:1b:6f:90:c7:62:51:96:8e:ee:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AB:1E:0F:9D:8D:DD:22:71:AF:66:7B:70:46:93:84:21:37:89:DB
            X509v3 Authority Key Identifier:
                keyid:8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/AEB081C8EB7D11F08F2DA3C6506F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:db:18:ab:25:f1:93:82:32:22:3a:4a:4e:3c:52:18:16:67:
         fe:1c:94:79:8d:58:90:56:3c:8f:2e:05:03:d0:ed:fc:fb:1d:
         62:84:e6:01:43:5a:6e:2d:40:fc:3e:f5:27:7f:8f:c0:c3:42:
         a5:dd:93:09:42:98:2a:e2:6d:67:b7:b0:43:a7:3b:5f:7e:31:
         40:8b:77:77:33:6e:9f:78:00:6d:60:f6:30:2e:b2:05:36:45:
         27:a4:85:36:df:8e:99:1f:61:61:91:73:d2:e7:d7:c3:03:19:
         95:53:33:9c:9e:37:7b:fb:1d:ff:6a:8e:fd:8a:2c:ee:4b:24:
         06:d9:bd:8b:b5:01:8e:5b:b4:bc:76:08:09:ff:b5:9f:b8:32:
         db:42:7f:90:2c:79:d4:81:53:65:2c:e4:7a:28:bc:2e:d9:5e:
         c3:d9:71:f1:36:a4:83:39:8c:1a:0f:21:92:4c:7d:31:8f:8a:
         8e:b1:5c:90:f7:82:96:ca:81:fc:46:43:05:c5:8e:c2:ef:66:
         8e:89:dd:49:6c:02:a0:fc:70:97:33:78:ee:ff:6a:ab:36:ce:
         fb:02:24:14:a7:d2:f4:9a:7b:56:11:4c:5d:63:c1:e4:2a:e2:
         52:f3:fc:b8:28:0b:87:65:13:32:d1:94:48:be:39:21:d6:22:
         ad:a2:ea:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:24 2026 by rpki-client